Maintenance status

This page outlines the current maintenance status of Composr.

Branch maintenance

As based on our policy described in our Problem and feedback reports, and development policies tutorial, current Composr branches are maintained as follows…

Branch	Git branch	Latest version	Released On	Branch Status
10.x	master	10.0.50	17th Aug 2024, 8:43 PM	Long-term maintenance
10.1.x	v10.1	10.1 beta23	17th May 2008, 8:04 AM	EOL
11.x	v11	11.beta3	11th Oct 2024, 2:35 PM	Beta
11.x	v11_cloud	11.alpha1	17th May 2008, 8:04 AM	Alpha

Branch statuses:

• Alpha: Not all planned features have been implemented yet. Bugs, including critical ones and security issues, are expected. Do not use in production.
• Beta: All planned features have been implemented, but bugs are still expected. Not recommended for production.
• Mainline: This branch is receiving bug fixes and periodic new features. Most suitable for production.
• Supported: This branch is only receiving bug fixes. Can be used for production, but consider upgrading in the future.
• Long-term maintenance: This branch is only receiving fixes for critical bugs or security vulnerabilities that affect multiple people. Can be used in production, but consider upgrading in the near future.
• EOL: End of life. This branch is not receiving any more updates and may contain bugs and security issues. Not suitable for production; you should upgrade to a supported version as soon as possible.

Feature maintenance

Composr is an enormous system that contains a number of highly specialist features as well as integration with third-party systems that are subject to unpredictable change.

It isn't feasible for the core developers to guarantee all this will keep working as things evolve internally and externally, often at a rapid pace outside our control. This is especially true when the available developer power for Composr is low.

We track functionality that has a moderate to high risk of breakage. This:

1. Helps us provide a reliable product and ecosystem by informing users of what they need to keep an eye on and budget for if they want support for said feature
2. Allows us to encourage funding / sponsorships or hiring developers within the community for on-going support of rare or fragile functionality (we think it's fair for the up-keep of highly specialist and advanced functionality to be directly paid for by those who need it)
3. Allows us to mark off unreliable functionality so that we don't need to force core developers to maintain every specialist cross-cutting feature that has ever been added to Composr (sometimes things are worth keeping, but only worth actively maintaining if there's funding or a large user-base)
4. Helps direct testing efforts
5. Provides us a broad reminder of what needs on-going reappraisal

Further discussion and justification may be found in and directed to the original tracker issue.

Bugs may be reported for non-actively-maintained functionality. However, the speed at which they will be fixed (or if they get fixed at all) will depend on developer availability and their sense of priority. Additionally, most tracker issues for features not maintained will be marked off as sponsorship, meaning they are subject to members sponsoring the issue or hiring someone to do it.

Sponsorship

Sponsorship involves taking direct responsibility including testing and bug fixing, or paying someone (e.g. a Composr partner) to do that. In some cases it may also involve taking some up-stream responsibility, funding or maintaining frameworks or projects that Composr functionality is depending on.

The cost of sponsoring functionality may vary greatly depending on the amount of time and effort needed to maintain said feature. And costs are at the discretion of the individual or company you wish to hire.

Note that sponsoring functionality initially is not the same as sponsoring on-going maintenance. Once something is implemented and delivered there isn't a guarantee it can be maintained forever without on-going sponsorship (and it usually will not).

Maintenance status table

The table below outlines the current status of features which have an elevated risk of breaking. The table also outlines the current status of maintenance (e.g. which individual / company is actively maintaining each feature). Any features which do not have a listing for "Actively bug-fixed by" are likely broken in Composr (or could get broken in the future).

If you see a feature here that you would like to sponsor for bug fixes and/or maintenance, consider hiring a Composr partner to do so. Or, if you would like to maintain it yourself, consider making a merge request on our repository for the feature you want to maintain (fixing something or adding a new feature), and then contacting us so we can list you here (choose free options, make a partnership inquiry).

Title	Actively Bug-Fixed by	Actively Maintained by	Notes	Non-bundled addon	Testing automation
Bing Translator integration	Composr Core Development Team	Composr Core Development Team	Could potentially break due to third-party changes.	No	_api_translation automated test.
Mobile Chrome (Android & iOS) support	Composr Core Development Team	Composr Core Development Team	Could potentially break due to third-party changes.	No	None
Android Browser support (pre-Chrome)	Composr Core Development Team	None	Not regularly tested. Could potentially break due to third-party changes.	No	None
Chrome/Opera/Blink support	Composr Core Development Team	Composr Core Development Team	Could potentially break due to third-party changes.	No	None
Firefox support	Composr Core Development Team	Composr Core Development Team	Could potentially break due to third-party changes.	No	None
Mobile Safari (iOS) support	Composr Core Development Team	Composr Core Development Team	Could potentially break due to third-party changes.	No	None
IE/Microsoft Edge support	Composr Core Development Team	Composr Core Development Team	Could potentially break due to third-party changes.	No	None
Safari support	Composr Core Development Team	None	Could potentially break due to third-party changes.	No	None
APC/APCu persistent cache	Composr Core Development Team	None	Not regularly tested due to needing a testing platform.	No	None
Persistent cache via filesystem	Composr Core Development Team	None	Not regularly tested. Liable to break due to cross-cutting complexity.	No	None
Memcache persistent cache	None	None	Not regularly tested due to needing a testing platform.	No	None
Memchanged persistent cache	None	None	Not regularly tested due to needing a testing platform.	No	None
Zend OpCache	Composr Core Development Team	PDStig, LLC	Not regularly tested due to needing a testing platform.	No	None
WinCache persistent cache	Composr Core Development Team	None	Not regularly tested due to needing a testing platform.	No	None
XCache persistent cache	None	None	Not regularly tested due to needing a testing platform.	No	None
Character sets	None	None	Not regularly tested.	No	None
Cloudflare optimisations (potentially-disruptive optimisations Cloudflare may try and make when proxying the site)	PDStig, LLC	PDStig, LLC	Not regularly Tested.	No	None
Cloudflare true IP detection (a list of Cloudflare IPs to trust)	Composr Core Development Team	PDStig, LLC	Not regularly Tested.	No	Part of release process / __special_links and cloudflare_ip_range_sync automated tests.
Magic click / context menu features	Composr Core Development Team	None	Not regularly tested.	No	None
Running across multiple domains and Cross-Origin Resource Sharing (CORS)	Composr Core Development Team	None	Not regularly Tested.	No	None
ISO countries (internal list) and flag images	Composr Core Development Team	None	Could potentially break due to political changes.	No	None
CPF encryption	Composr Core Development Team	None	Not regularly tested.	No	encryption automated test (back-end testing only).
Currency conversion	Composr Core Development Team	None	Could potentially break due to third-party changes.	No	None
ISO currencies (internal list)	Composr Core Development Team	None	Could potentially break due to political changes.	No	_api_currency automated test.
Theme Wizard: Dark themes	Composr Core Development Team	Composr Core Development Team	It is easy for dark theme support to break if not tested after any CSS changes.	No	None
IBM DB2 database driver	None	None	Not regularly tested due to needing a testing platform. Could potentially break due to third-party changes.	No	Partly tested by database_misc automated test. Partly tested by running of full test set.
Oracle database driver	None	None	Not regularly tested due to needing a testing platform. Could potentially break due to third-party changes.	No	Partly tested by database_misc automated test. Partly tested by running of full test set.
PostgreSQL database driver	None	None	Not regularly tested due to needing a testing platform. Could potentially break due to third-party changes.	No	Partly tested by database_misc automated test. Partly tested by running of full test set.
Microsoft SQL server database driver	None	None	Not regularly tested due to needing a testing platform. Could potentially break due to third-party changes.	No	Partly tested by database_misc automated test. Partly tested by running of full test set.
XML database driver	Composr Core Development Team	None	Intended for developers only. Does not currently work on Windows due to patch length limitations.	No	Partly tested by _installer_xml_db automated test. Partly tested by running of full test set.
Configuration of multiple database servers (with only one taking write queries)	None	None	Not regularly tested.	No	None
Bot detection (user-agent list, IP safelist, and DNS safelist)	Composr Core Development Team	None	Not regularly tested. Could potentially break due to third-party changes.	No	Partly tested by ua_detection automated test.
Mobile user agent detection	Composr Core Development Team	None	Not regularly tested. Could potentially break due to third-party changes.	No	Partly tested by ua_detection automated test.
Download PDF search indexing	Composr Core Development Team	None	Not regularly Tested.	No	download_indexing automated test.
E-mail integration	Composr Core Development Team	None	Not regularly tested for all e-mail environments and setups.	No	None
Provide EU cookie warning	Composr Core Development Team	None	Not regularly tested, depends on the third-party library Silktide.	No	None
Download of EU digital tax rates	Composr Core Development Team	None	Could potentially break due to third-party changes.	No	_api_ecommerce_tax automated test.
Various tools that the Health Check will link out to when manual checks are enabled.	Composr Core Development Team	None	Not regularly Tested.	No	Partly tested by __special_links automated test.
Recommended links on staff dashboard, and accuracy of external URLs in general	Composr Core Development Team	None	Not regularly tested. Could potentially break due to third-party changes.	No	_broken_links automated test.
Permission/eCommerce/profile logging features	Composr Core Development Team	None	Not fully manually tested.	No	Partly tested by extra_logging automated test.
FFMPEG thumbnail generation	None	None	Not regularly tested. Could potentially break due to third-party changes.	No	None
"Show forum within website" option	None	None	Not regularly tested and has the potential for instability.	No	None
Invision Board forum driver	None	None	Not regularly tested. Out-dated. Needs ongoing maintenance.	No	Partly tested by running of full test set
MyBB forum driver	None	None	Not regularly tested. May become out-dated. Needs ongoing maintenance.	No	Partly tested by running of full test set
No forums or members forum driver	None	None	Not regularly tested. Liable to break due to cross-cutting complexity.	No	Partly tested by running of full test set
phpBB forum driver	None	None	Not regularly tested. May become out-dated. Needs ongoing maintenance.	No	Partly tested by running of full test set
Simple Machine Forum forum driver	None	None	Not regularly tested. Out-dated. Needs ongoing maintenance.	No	Partly tested by running of full test set
vBulletin forum driver	None	None	Not regularly tested. Out-dated. Needs ongoing maintenance.	No	Partly tested by running of full test set
Burning Board forum driver	None	None	Not regularly tested. Out-dated. Needs ongoing maintenance.	No	Partly tested by running of full test set
Authorize.net eCommerce driver	None	None	Not regularly tested. Could potentially break due to third-party changes.	No	None
CCBill eCommerce driver	None	None	Not regularly tested. Could potentially break due to third-party changes.	No	None
PayPal eCommerce driver	Composr Core Development Team	None	Could potentially break due to third-party changes.	No	Partly tested by usergroup_subscriptions automated test.
Bing Geocoding (forward and reverse)	Composr Core Development Team	Composr Core Development Team	Could potentially break due to third-party changes.	No	__api_geocoding automated test.
Google Geocoding (forward and reverse)	None	None	Not regularly tested due to Google making this a paid service. Could potentially break due to third-party changes.	No	__api_geocoding automated test.
MapQuest Geocoding (forward and reverse)	Composr Core Development Team	Composr Core Development Team	Could potentially break due to third-party changes.	No	__api_geocoding automated test.
Google Analytics integration.	Composr Core Development Team	None	Not regularly Tested.	No	None
Google reCAPTCHA	Composr Core Development Team	None	Not regularly Tested.	No	__health_check automated test to run Health Checks.
The Google Safe Browsing API.	Composr Core Development Team	None	Not regularly Tested.	No	__health_check automated test to run Health Checks.
The Google Search Console API.	Composr Core Development Team	None	Not regularly Tested.	No	None
Google Translate integration	Composr Core Development Team	Composr Core Development Team	Could potentially break due to third-party changes.	No	_api_translation automated test.
Gravatar	Composr Core Development Team	None	Not regularly tested. Could potentially break due to third-party changes.	No	None
HTTP proxy support	Composr Core Development Team	None	Not regularly tested due to needing a testing platform.	No	None
HTTP authentication	None	None	Not regularly tested.	No	Partly tested by httpauth automated test.
"Composr site merger" importer	Composr Core Development Team	None	Not regularly tested. Site merging is not a substitute for upgrading.	No	None
HTML website importer	None	None	Not regularly tested and has the potential for instability.	No	None
Invision Board importer	None	None	Needs ongoing maintenance, and liable to be ineffective as people need plugin data importing too.	No	None
myBB importer	None	None	Needs ongoing maintenance, and liable to be ineffective as people need plugin data importing too.	No	None
phpBB importer	None	None	Needs ongoing maintenance, and liable to be ineffective as people need plugin data importing too.	No	None
Simple Machine Forum importer	None	None	Needs ongoing maintenance, and liable to be ineffective as people need plugin data importing too.	No	None
vBulletin importer	None	None	Needs ongoing maintenance, and liable to be ineffective as people need plugin data importing too.	No	None
Wordpress importer	None	None	Needs ongoing maintenance, and liable to be ineffective as people need plugin data importing too.	No	None
Infinite scrolling	Composr Core Development Team	None	None	No	None
Inline Editing	Composr Core Development Team	None	Not regularly Tested, and themes are not typically expected to support it out-of-the-box.	No	None
APS installer	None	None	We maintain builds via an automated process. Not regularly tested due to needing a testing platform.	No	None
Installatron installer	Composr Core Development Team	None	We maintain builds via an automated process. Not regularly tested due to needing a testing platform.	No	None
IP address geocoding (internal list)	Composr Core Development Team	Composr Core Development Team	Could potentially break due to third-party changes.	No	Part of release process / __api_geocoding automated test.
Links to external IP address tools	Composr Core Development Team	None	Not regularly tested. Could potentially break due to third-party changes.	No	Partly tested by __special_links automated test.
Looking up metadata for IP addresses	Composr Core Development Team	None	Could potentially break due to third-party changes.	No	Tested by _api_ipstack automated test.
iTunes podcasts	None	None	Not regularly tested in iTunes.	No	Partially tested by feeds_and_podcasts automated test.
Non-English languages	None	None	Not regularly tested due to needing contributors who understand other languages to provide translations.	No	Partly tested / utilised by _api_transifex
American English	Composr Core Development Team	None	We automatically can convert most British English to American English, but it is not perfectly tested.	No	us_english automated test.
LDAP	None	None	Not regularly tested due to the complexity of having multiple working LDAP test environments.	No	None
full Google Analytics cookies	Composr Core Development Team	Composr Core Development Team	Not regularly tested. Could potentially break due to third-party changes.	No	None
Maintain support for MariaDB	Composr Core Development Team	PDStig, LLC	Not regularly tested with versions above 10.6. Could potentially break due to third-party changes, although they do claim MySQL-compatibility.	No	None
Moz API.	Composr Core Development Team	None	Not regularly Tested.	No	_api_moz automated test.
Multi-site-networks	None	None	Not regularly tested. Liable to break due to cross-cutting complexity.	No	Partly tested by db_correctness automated test, and run-time driver use detection. Partly tested by running of full test set.
Content translations	Composr Core Development Team	None	Not regularly tested. Liable to break due to cross-cutting complexity.	No	Randomised mode at dev install. Partly tested by running of full test set.
Maintain with new versions of MySQL	Composr Core Development Team	PDStig, LLC	Not regularly tested with versions higher than 8.2. Could potentially break due to third-party changes.	No	None
Postmark spam-check integration	Composr Core Development Team	None	Could potentially break due to third-party changes.	No	newsletters automated test.
Lists of IPs to not block	Composr Core Development Team	None	Not regularly Tested.	No	Part of release process / __special_links automated test.
Default oEmbed configuration	Composr Core Development Team	None	Not regularly Tested.	No	oembed automated test.
Development options in config_editor.php	Composr Core Development Team	None	Not regularly tested.	No	None
Hidden options	Composr Core Development Team	None	Not regularly tested. Mostly intended for developers or very low-level configuration.	No	None
Linux servers	Composr Core Development Team	Composr Core Development Team	None	No	None
Mac OS servers	Composr Core Development Team	None	Not regularly tested due to needing a testing platform.	No	None
Windows servers	Composr Core Development Team	Composr Core Development Team	None	No	None
Maintain with new versions of PHP	Composr Core Development Team	Composr Core Development Team	Not regularly tested with versions below 7.4 or above 8.3. Could potentially break due to third-party changes.	No	None
Detect if a PHP version is used that is no longer maintained by PHP developers.	Composr Core Development Team	None	Not regularly Tested. Could potentially break due to third-party changes.	No	php_versioning automated test.
Apache	Composr Core Development Team	Composr Core Development Team	None	No	None
Non-suEXEC platform support	Composr Core Development Team	None	Not regularly tested. Likely to be very un-friendly to the admin, so should be discouraged.	No	None
cPanel Control Panel	None	None	Not regularly tested. Can make changes to site behaviour which disrupt functionality.	No	None
Google App Engine platform support	None	None	Not regularly tested due to needing a testing platform. Could potentially break due to third-party changes.	No	None
IIS	None	None	Not regularly tested due to needing a testing platform. Could potentially break due to third-party changes.	No	None
LiteSpeed	None	None	Not regularly tested due to needing a testing platform. Could potentially break due to third-party changes.	No	None
ModSecurity	Composr Core Development Team	PDStig, LLC	Not regularly tested. Could potentially break due to third-party changes.	No	Fake ModSecurity implemented in dev-mode.
NGINX	PDStig, LLC	PDStig, LLC	Not regularly tested. Only intended to work with Apache as a back-end and the NGINX static cache disabled.	No	None
Peach Pie platform support	None	None	Not regularly tested due to needing a testing platform. Could potentially break due to third-party changes.	No	None
Plesk Control Panel	PDStig, LLC	PDStig, LLC	Not regularly tested. Can make changes to site behaviour which disrupt functionality.	No	None
Suhosin	Composr Core Development Team	None	Not regularly tested. Could potentially break due to third-party changes.	No	None
POP3 e-mail accounts	None	None	We allow configuration of using POP3 instead of IMAP for various inbox checking features but do not actively test it works (it relies on PHP's IMAP addon supporting POP3 well)	No	None
Aggressive pop-up blockers	Composr Core Development Team	None	Some pop-up blockers (E.g. "Better pop-up blocker" on Chrome") may break common JavaScript. We try and workaround it, but it is not regularly tested.	No	None
Project Honeypot integration	Composr Core Development Team	PDStig, LLC	Not regularly tested. Could potentially break due to third-party changes.	No	None
Remote Block List integration	Composr Core Development Team	None	Not regularly tested. Could potentially break due to third-party changes.	No	None
Stability when the database is read-only (if a webhost has locked out write access due to quota issues)	None	None	Not regularly tested.	No	None
Rootkit detector	Composr Core Development Team	None	Not compatible with all systems. Intended for developers.	No	Partly tested by rootkit_detection automated test.
Shippo integration for shipping calculations	Composr Core Development Team	None	Could potentially break due to third-party changes.	No	ecommerce_shipping automated test.
XML Sitemap auto-submit	None	None	Out-dated as Google and Bing no longer have a method to auto-submit sitemaps.	No	sitemap_submit automated test.
SMS notifications	None	None	Not regularly tested. Could potentially break due to third-party changes.	No	None
Basic social media / instant messenger linkage	Composr Core Development Team	None	Not regularly tested. Could potentially break due to third-party changes.	No	None
SSL certificate trust chains (internal list)	Composr Core Development Team	None	Could potentially break due to third-party changes.	No	Part of release process / __special_links automated test.
Manual compliance checks for ATAG and WCAG	Composr Core Development Team	None	Active manual checks such as checking contrast, or having active testing sessions, would be a significant cost.	No	Automated web standards tests.
Microformats compliance	Composr Core Development Team	None	Not regularly tested.	No	Partly tested by microformats automated test.
Support users without cookies	Composr Core Development Team	None	May break site functionality and prevent the user from being able to log in.	No	None
Support users without JavaScript	None	None	Not tested. Most modern web browsers make JavaScript mandatory. Therefore, we make an assumption that JavaScript will always be available.	No	None
Open Graph	Composr Core Development Team	None	Not regularly tested. Could potentially break due to third-party changes.	No	None
schema.org compliance	Composr Core Development Team	None	Not regularly tested.	No	None
Stop Forum Spam integration	Composr Core Development Team	Composr Core Development Team	Could potentially break due to third-party changes.	No	antispam automated test.
TaxCloud integration for US sales tax	None	None	Could potentially break due to third-party changes.	No	_api_ecommerce_tax automated test.
TaxJar integration for sales tax	Composr Core Development Team	None	Could potentially break due to third-party changes.	No	_api_ecommerce_tax automated test.
Textmate integration	Composr Core Development Team	None	Needs to be separately tested. Needs a testing platform.	No	None
Mobile mode support	Composr Core Development Team	Composr Core Development Team	Needs to be separately tested. Liable to break due to cross-cutting complexity.	No	None
Custom print layout support in default theme	Composr Core Development Team	None	Not regularly tested.	No	None
Right-to-left support in default theme	None	None	Not regularly tested.	No	None
Theme Upgrader	None	None	There is code to upgrade themes built into the upgrader but it manually needs writing out for between-version upgrades.	No	None
Theme Wizard	Composr Core Development Team	Composr Core Development Team	It is easy for the Theme Wizard to break if not tested after CSS changes.	No	None
Theme Wizard: Extreme seeds	Composr Core Development Team	None	Using extremely bright seeds on a light theme or extremely dark seeds on a dark theme may result in elements which are hard to see.	No	None
Timezone list	Composr Core Development Team	Composr Core Development Team	None	No	None
Tornevall integration	Composr Core Development Team	None	Could potentially break due to third-party changes.	No	antispam automated test.
E-mail+IP two-factor authentication	Composr Core Development Team	None	None	No	None
Vimeo media	None	None	Not regularly tested. Could potentially break due to third-party changes.	No	None
YouTube media	Composr Core Development Team	None	Not regularly tested. Could potentially break due to third-party changes.	No	None

Non-bundled addons

The default assumption for non-bundled addons if they are not listed should be that no non-bundled addon is supported to the same level of reliability and quality as Composr itself.

Title	Actively Bug-Fixed by	Actively Maintained by	Notes	Non-bundled addon	Testing automation
AWS SES notifications	None	None	Not regularly tested. Could potentially break due to third-party changes.	Yes	aws_ses automated test
Cloudinary integration	None	None	Not regularly tested. Could potentially break due to third-party changes.	Yes	_api_cloudinary automated test
Composr Mobile SDK Android and iOS notifications handling	None	None	None	Yes	None
Confluence integration	PDStig, LLC	None	Not regularly tested. Out-dated as Atlassian no longer supports self-hosted server instances.	Yes	_api_confluence automated test
Facebook integration	Composr Core Development Team	Composr Core Development Team	Could potentially break due to third-party changes.	Yes	None
Facebook media (video embed)	Composr Core Development Team	None	Could potentially break due to third-party changes.	Yes	None
Google maps (DataMappr, UserMappr)	Composr Core Development Team	None	Could potentially break due to third-party changes.	Yes	None
Hybridauth login and syndication	Composr Core Development Team	None	Could potentially break due to third-party changes, but we rely on the Hybridauth project to fix any issues and are involved in that project.	Yes	None
Karma non-bundled addon	PDStig, LLC	PDStig, LLC	None	Yes	None
OpenWeatherMap	Composr Core Development Team	None	None	Yes	_api_weather automated test.
Ratings structure	None	None	Not regularly tested. Only available via custom programming / the custom_ratings addon.	Yes	None
Sugar CRM integration	None	None	Not regularly tested. Could potentially break due to third-party changes.	Yes	SugarCRM Health Check
Tapatalk	None	None	Could potentially break due to third-party changes.	Yes	None
Transifex integration	Composr Core Development Team	Composr Core Development Team	Could potentially break due to third-party changes.	Yes	_api_transifex automated test. Part of release process.
WebDav access for The Repository	None	None	No longer maintained by SabreDAV. Does not work on PHP 8 or above.	Yes	__webdav automated test.

If you want a non-bundled addon receive on-going maintenance you can request to sponsor it. Most non-bundled addons will regardless be supported by critical bug fixes, and automatically updated as Composr APIs change – but not to the normal expected quality, and not proactively tested.

If the core developers feel there is not a use for a non-bundled addon any longer, and there is no interest in sponsoring its maintenance, the addon may be pulled from the main repository and archived on GitLab. This is so the core developers do not have to continue implementing critical bug fixes / API changes for a non-bundled addon which is likely being rarely used if at all. See this tracker issue for an ongoing list of non-bundled addons nominated for archiving / removal, and to discuss them.

Third-party software

The above list does not include third-party software (such as CKEditor) that is directly integrated into Composr. We do not usually take direct responsibility for improving this software or for regularly re-synching it. Sponsors may therefore want to consider sponsoring upstream projects too, and sponsoring refreshes of those within Composr. A list of third-party software may be found on the Sync with upstream tracker issue.